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Establishment of 
Financial Intelligence and 
Investigation Bureau 
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FATF ME Report of Hong Kong 
Recommended Actions “The JFIU and LEAs should consider: ... (iii) forming a 

Immediate Outcome 6 separate specialist financial intelligence and investigations 
bureau within the HKPF would strengthen capability...” 





Financial 


Investigation 





Money Laundering and 
4. Terrorist Financing 
> Investigations 





Established on 
1st June 2021 


Headquarters 
> STR Processing and D-O Policies, Legislation and 
SL Analysis Strategic Analysis 
Jr = i 

GS) Intelligence Exchange 3=| Risk Assessment, 


and Liaison ZO Training and Outreach 





Financial Data Analytic Platform 


FATF ME Report of 
Financial Data 


TREAM Hong Kon 
i a iia ie EM Analytic Platform 
First developed and Immediate Outcome 6 (FDAP) 
Launched "The JFIU and LEAs should 
(with enhancements added) consider: ... (ii) HKD 698 Mil of funding 
enhancement to the JFIU IT approved from Finance 
system to harness advance Committee of LegCo 


technologies..." 








Limitation of STREAMS 


Lack of automation 








Requires extensive manpower, resources and 
time for analysis and process STRs manually 
Lack of analytical capabilities 


Difficulties in handling large scale STRs and 
new type of data (e.g. digital footprints) 





The STR Process of FDAP 
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The STR Process of FDAP 


STR Submission 


à Dedicated STR Submission Form 
e Different STR Forms will be designed and prepared 


for different sector 
New STR Forms will be tailored to the nature of the 





sector 
Consultation with each sector will be carried out in the 
design of the new STR Forms 


Account Management 
Corporate account (with admin function) and sub- 
accounts 
Admin account to manage corporate sub-accounts 
Sub-accounts to be used for STR submission 
Multiple sub-accounts can be created by admin 
account. 





The STR Process of FDAP 


Data Matching 


Natural Language Processing 
E) * Understand the meaning of unstructured text/ free text 


(i.e. large paragraph of text in STR) 
e Identify entities stated in the unstructured text in STRs 
* Facilitate matching of OSINT data 





(&- GIFT Crawler 
6) Open Source Intelligence 


News, Media, Sanction List etc. 
Automated data matching with open source 
information to identify entities in the STRs 


SAR Data Mining 
A 


p e Automated data matching against police database 
000 e ADCC 


e Criminal Records 





The STR Process of FDAP 


Risk Scoring 


Natural Language Processing 
Ga) e Identify entities and relationships mentioned in the 


unstructured text in STRs 
e Facilitate analysis of STR and risk assessment 





AML/ CFT Analytical Tool 
* Automated risk assessment to identify the STR risk 
level 
e Automated high risk alert system 


Machine Learning 
* Identify entities reported in STR and their 
relationships with other high risk entities from the 
database 








The STR Process of FDAP 


Assessment and Analysis 


== AML/ CFT Analytical Tool 

e AML analytics against the entities and the identified 
underlying relationships 
Automated fund flow analysis 


Network analysis against the identified entities and their 
relationship 


SER Data Mining 


Identify hidden networks and their features 





GE + Group entities by their risk level, relationships etc... 
* Surface hidden syndicates 








The STR Process of FDAP 


Assessment and Analysis 







Machines Learning 
e Based on the analysis results, analytical models will be 


developed or refined for future analysis 


Speed up STR processing time 


PR * Increase processing speed of STRs 
e High risks/ urgent STRs will be priorities for assessment 








The STR Process of FDAP 


STR Feedback 


Digitalized LNC/ Consent Letter issuance 
e [NCs and consent letters will be digitally signed by 
= JFIU 
The letters will be issued to the reporting entities 
digitally via FDAP 
Reporting entities can access the letters from JFIU 
via FDAP 


~ Comprehensive STR feedback 
* Detailed feedback to STR reporting entities 
e Ouality/ usefulness of STR 
e Whether investigation was initiated from the 
STR 
* Aims to increase the overall quality of STR 
submission 








The STR Process of FDAP 


Trend Analysis 


SAR, Data Mining 

IN: e Using the data from all the STRs to identify trends 

900 and relationship between entities and criminal 
activities 
Identify territory wide trend from STRs, such as latest 
modus operandi used by syndicates 


Machines Learning 
e By using analytical models, FDAP can make crime 


trend predictions 
* Types of account holders who may be stooges 
* Type of crime which may become a prominent 
trend 
Types of potential victim 








The STR Process of FDAP 


Information Exchange 


i Reports and Bulletins 
Y aul * Trends and other relevant information generated 


from the FDAP will be shared to the sectors via 
regular JFIU reports/ bulletins uploaded to FDAP, 
such as: 

e Territory wide trend 

* Latest modus operandi 

* Potential prominent trend of crime 


Digitalized notification letters 
e Notification letters to different sectors will be 
digitalized and submitted via FDAP 








The STR Process of FDAP 


Investigation Results 


Network Analysis 
* The results from the network analysis would be 
captured in the FDAP for future reference, such as 
the entities relationship in a syndicates 
* The analysis results would also assist parallel 
investigations 


Data Mining 
Investigation results would be used to capture the 
identified network and their features 
The results would also be used to create new alerts 
and analytical models to speed up investigations 








Benefits of FDAP 


A) Speed Up STR Processing 
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Crime Trend Analysis and 
Report 





OSINT 
Crawler 





Reporting Entities Benefits from FDAP 


Dedicated STR 
submission forms 







Account 
management 


Digitalized LNC/ 
Consent Letter 


Speed up consent 

decision from JFIU 

Eu] Reports and bulletins 
sharing from JFIU 





JFIU Case 


Payment Message 
Observation Y 





Digital Footprint 





Single Bank Account with 
Multiple IP Address 
Access / Device IDs 


IP Address Access / 
Device IDs Reveal 
Monitoring Pattern 





Single IP Address 
Accessed / Device IDs 
linked to Multiple Bank 
Accounts 


Foreign IP addresses 
from different geo-location 
within a short period of 
time 





Digital Footprint Records 





IP address 


e Registration 






Device related 


© Device ID . ode _ email 
e Device OS/ model address, phone number) 
e IMEI * Device change 


* Password change © 





Payment Message 





Weapons and 
Ammunitions 

Pistol, Guns, Bullets, 

Weapon Parts, Rifle, Blades etc... 


Chemicals 


Acetone, Hydrochloric Acid, 
Potassium Nitrate etc... 


Potential Prohibited/ 


Regulated Items 
Bulletproof Vest, 
Tactical Helmets, Air guns etc... 


Gambling Related 
Joker, 604winjoker, 
Top-up $100 (T418) etc... 








Thank You For Listening 


